Legal
Privacy policy
What we collect, why we collect it, who else handles it, and what you can ask us to do with it.
Last updated: 10 October 2026
Who is responsible for your information?
NIEUW Solutions Pvt Ltd, operating as Xuvian ("Xuvian", "we", "us"). CIN U62091KA2023PTC176400. Registered office: Pavani Sarovar, Nallurhalli Main Road, Whitefield, Bengaluru 560066, Karnataka, India.
We follow India's Digital Personal Data Protection Act 2023 and the Digital Personal Data Protection Rules 2025. If you are in the European Union or the United Kingdom, you also have the rights the GDPR gives you, set out below.
Questions about this policy go to our Grievance Officer, Amit Srivastava. Use the formal contact route to see the contact details.
Does this website use cookies?
No. xuvian.com sets no cookies and loads nothing from other companies' servers. Our fonts are stored on our own server. There is no analytics and no advertising tracking.
The portals at apply.xuvian.com, portal.xuvian.com and investors.xuvian.com use one session cookie so you can sign in and stay signed in. It is needed for the portal to work, so we do not ask for consent to it. It is not used for tracking or advertising.
If we ever add analytics or any other non-essential cookie, we will ask for your consent first.
What do we collect from founders?
- Your name, email address and phone number.
- Your LinkedIn profile link.
- Your pitch deck and any other documents you send.
- Your answers to our questions, and your progress updates.
We use this to evaluate your company, prepare our questions and your report, write to you about your application and, where you are on the investment path, prepare what investors on Xuvian read about your company. A company is shown to investors only after Xuvian has decided to back it and the founder has been told. The founder can turn investor review off from their portal.
What do we collect from investors?
- Your name, email address and phone number.
- Your investor type.
- Your accredited investor certificate, which shows your PAN and the dates it is valid.
- Payment records, if you pay for anything on the investor portal. These come from Razorpay: payment ID, amount, status, date, and the name, email, phone and billing country used. We never receive or store your full card number.
We use this to set up your account, check you are eligible, give you access, bill you, keep tax records and support you.
What else do we collect?
- What you write to us by email or through a form, so we can reply.
- Technical records our servers create when you use a portal, used to keep the service secure.
Why do we use it, and on what basis?
| Purpose | Information | Basis |
|---|---|---|
| Evaluate a founder's company and prepare questions and reports | Founder details, deck, answers | Your consent when you apply; for GDPR, also the service you asked for |
| Run your account and sign-in | Name, email, phone, session cookie | The service you asked for |
| Check investor eligibility | Investor type, accreditation certificate | Your consent; the service you asked for |
| Take payment, issue invoices, keep tax records | Payment records, name, billing country | Legal duty under tax and payment laws |
| Keep the service secure and prevent misuse | Technical records | Legitimate use; for GDPR, our legitimate interest |
| Send news or offers | Only if you opt in. You can stop at any time |
We do not sell your information. We do not use it for advertising.
Who else handles your information?
We use other companies to run parts of the service. They handle your information only on our instructions.
- Razorpay processes payments.
- Hosting providers run the website and portals.
- An email provider sends our emails. Zoho Mail (Zoho Corporation, India).
- AI model providers process founder material. When you apply, your deck and answers are sent to a model provider to help prepare our questions and your report. A provider may process this information outside India.
We may also share information when the law requires it, for example with tax authorities or in answer to a lawful order.
Is any decision made by software alone?
We use software, including AI models, to help evaluate a company and draft our questions and reports. Investment decisions are made by Xuvian. You can ask for a person to review a decision about you by writing to the Grievance Officer.
Does your information leave India?
Some of it does. AI model providers and some other service providers may process it outside India. Indian law allows this except to countries the Government restricts.
If you are in the EU or UK, your information comes to India and may also be processed in the countries where our service providers operate.
How long do we keep it?
We keep information while an application or account is active and for as long as we need it to provide the service, keep required business records, resolve disputes and meet the law. Payment and invoice records are kept for as long as tax and payment laws require. When we no longer need information and the law does not require us to keep it, we delete or de-identify it.
How do we protect it?
Access to personal information is limited to people and systems that need it. The portals use encrypted connections. If a breach affects your information, we tell you and report it when the law requires us to.
What are your rights?
You can ask us to:
- tell you what information we hold about you and how we use it;
- correct or complete it;
- delete it, unless the law requires us to keep it;
- name a person who can act for you if you die or cannot act yourself.
If you are in the EU or UK, you can also ask us to limit how we use your information, to give it to you in a portable form, and you can object to our use of it based on legitimate interest.
To use any of these rights, open the formal contact route.
How do I withdraw consent?
Use the formal contact route. For marketing emails, you can also use the unsubscribe link in any email. Withdrawing is as easy as giving consent. It does not affect what we did before. If you withdraw consent we need to run the service, we may no longer be able to evaluate your company or give you access.
Is the service for children?
No. Xuvian is for people aged 18 and over. We do not knowingly collect information about children.
How do I complain?
First, write to our Grievance Officer, Amit Srivastava, through the formal contact route.
We acknowledge a complaint within 48 hours and resolve it within one month.
If you are not satisfied, you can complain to the Data Protection Board of India. If you are in the EU or UK, you can also complain to the data protection authority where you live or work.
Changes to this policy
We may update this policy. The date at the top shows when it last changed. If a change affects how we use information you have already given us, we tell you before it applies.
NIEUW Solutions Pvt Ltd, operating as Xuvian. CIN U62091KA2023PTC176400. GSTIN 29AAJCN0212H1ZO. Pavani Sarovar, Nallurhalli Main Road, Whitefield, Bengaluru 560066, Karnataka, India.